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WHAT IS CLAIMED IS: 

1 . A web-based method for applying a legally enforceable signature of a user on 
an electronic document, the signing of said document occurring in a web 

5 environment, said method comprising the steps of: 

a) having the user access the web environment from a secure electronic system, 
said secure system having verified the identity of the user; 

b) having the user sign the electronic document in said web environment, said 
signing comprising the substeps of: 

1 0 i) presenting the user with a web-based representation of the document; 

ii) presenting the user with legal infonnation related to said signing, and 
getting agreement from the user of said legal infomnation; and 
iil) upon agreement from the user of the legal information, applying said 
signature of the user on said document; 
1 5 c) generating a process log of the signing of step b) and securely associating said 
process log with the document as signed; and 
d) malting the document as signed available to the user. 

2. A method according to claim 1, wherein substep b) i) comprises retrieving said 
20 document from a document storing location. 

3. A method according to claim 1 , wherein substep b) i) comprises generating said 
document from a template. 

25 4. A method according to claim 1, wherein substep b) i) comprises transforming 
said document from a non-web fomiat to a web-format. 

5. A method according to claim 1, wherein, in step b) ii), said legal information 
comprises information about legal implications of the signing of the document. 
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6. A method according to claim 1, wlierein, in step b) ii), said legal information 
comprises legal disclosures related to said document. 

7. A method according to claim 1 , wherein substep b) ii) comprises presenting said 
5 legal information in a series of web pages. 

8. A method according to claim 1, wherein substep b) ii) comprises presenting said 
legal information in a series of dialog boxes. 

10 9. A method according to claim 1, wherein substep b) iii) comprises associating 
user-specific information to said document. 

10. A method according to claim 9, wherein, in substep b) iii), said user-specific 
information is included in a special signature file defining the signature of the user. 

15 

11. A method according to claim 9, wherein substep b) iii) further comprises 
associating a digital certificate and private key to the document. 

12. A method according to claim 9, wherein substep b) iii) further comprises 
20 obtaining said user-specific information from the secure electronic system. 

13. A method according to claim 1, wherein, in step c), said process log allows the 
reconstruction of substeps b) i) to b) iii) as executed by said user. 

25 14. A method according to claim 1, wherein step c) further comprises storing said 
process log in a log database. 

15. A method according to claim 1, wherein step c) comprises the substeps of: 
i) generating a secure process authentication code uniquely representing said 
30 process log; and 
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ii) embedding said process autfientication code in said document as signed, 
thereby securely associating said process log and document. 

16. A method according to claim 15, wherein, in step c) ii), said secure process 
5 authentication code is a hash of said process log. 

17. A method according to claim 1, comprising an additional step before step d) of 
providing an audit trail of the signing of step b) in the document as signed. 

10 18. A method according to claim 17, wherein said additional step comprises 
including a secure document authentication code uniquely representing said 
document as signed in said audit trail. 

19. A method according to claim 18, wherein said additional step further comprises 
1 5 storing said secure document authentication code in a database. 

20. A method according to claim 18, wherein said additional step further comprises 
generating a hash of said document as signed defining the secure document 
authentication code. 

20 

21. A method according to claim 1, comprising an additional step before step d) of 
embedding a secure document authentication code uniquely representing the 
document as signed inside said document. 

25 22. A method according to claim 1 , wherein step d) comprises transmitting a copy 
of the document as signed to the user. 

23. A method according to claim 1, wherein step d) comprises enabling the user to 
download the document as signed. 

30 
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24. A method according to claim 1, wherein step d) further comprises making the 
document as signed available to at least one additional party concerned by said 
electronic document. 

5 25. A web-based method for applying a legally enforceable signature of a user on 
an electronic document, the signing of said document occurring in a web 
environment, said method comprising the steps of: 

a) having the user access the web environment from a secure electronic system, 
said secure system having verified an identity of the user; 
1 0 b) having the user sign the electronic document in said web environment, said 
signing comprising the substeps of: 

I) presenting the user with legal information related to said signing, and 
getting agreement from the user of said legal infonnatlon; 

II) presenting the user with a web-based representation of the document; 

1 5 ill) getting confirmation from the user that the document Is to be signed; and 

iv) applying said signature of the user on said document; 

c) generating a process log of the signing of step b) and securely associating said 

process log with the document as signed; and 

d) making the document as signed available to the user. 

20 

26. A method according to claim 25, wherein, in step b) i), said legal information 
comprises information about legal implications of the signing of the document. 

27. A method according to claim 25, wherein, in step b) i), said legal infomnatlon 
25 comprises legal disclosures related to said document. 

28. A method according to claim 25, wherein substep b) i) comprises presenting 
said legal information in a series of web pages. 

30 29. A method according to claim 25, wherein substep b) i) comprises presenting 
said legal information in a series of dialog boxes. 
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30. A method according to claim 25, wherein substep b) ii) comprises retrieving 
said document from a document storing location. 

5 31 . A method according to claim 25, wherein substep b) ii) comprises generating 
said document from a template. 

32. A method according to claim 25, wherein substep b) ii) comprises transforming 
said document from a non-web format to a web-format. 

O 33. A method according to claim 25, wherein substep b) iv) comprises associating 

liH user-specific information to said document. 

B 34. A method according to claim 33, wherein. In substep b) iv), said user-specific 

r 1 5 infonnatlon is Included in a special signature file defining the signature of the user. 

is s 

H 35. A method according to claim 33, wherein substep b) iv) further compnses 

S associating a digital certificate and private key to the document. 

20 36. A method according to claim 33, wherein substep b) iv) further comprises 
obtaining said user-specific information from the secure electronic system. 

37. A method according to claim 25, wherein, in step c), said process log allows 
the reconstruction of substeps b) i) to b) iv) as executed by said user. 

25 

38. A method according to claim 25, wherein step c) further comprises storing said 
process log in a log database. 
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39. A method according to claim 25, wherein step c) comprises the substeps of: 
i) generating a secure process authentication code uniquely representing said 
process log; and 
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ii) embedding said process autlientication code in said document as signed, 
tliereby securely associating said process log and document. 

40. A method according to claim 39, wherein, in step c) ii), said secure process 
5 authentication code is hash of said process log. 

41 . A method according to claim 25, comprising an additional step before step d) 
of providing an audit trail of the signing of step b) in the document as signed. 

10 42. A method according to claim 41, wherein said additional step comprises 
including a secure document authentication code uniquely representing said 
document as signed in said audit trail. 

43. A method according to claim 42, wherein said additional step further comprises 
1 5 storing said secure document authentication code in a database. 

44. A method according to claim 42, wherein said additional step further comprises 
generating a hash of said document as signed defining the secure document 
authentication code. 

20 

45. A method according to claim 25, comprising an additional step before step d) 
of embedding a secure document authentication code uniquely representing the 
document as signed inside said document. 

25 46. A method according to claim 25, wherein step d) comprises transmitting a 
copy of the document as signed to the user. 

47. A method according to claim 25, wherein step d) comprises enabling the user 
to download the document as signed. 

30 
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48. A method according to claim 25, wherein step d) further comprises sending a 
copy of the document as signed to at least one additional party concerned by said 
electronic document. 

5 49. A system for applying a legally-enforceable signature of a user on an electronic 
document In a web environment, said system comprising: 

accessing means for accessing said web environment from a secure 
electronic system; 

a document-rendering module for presenting the user with a web-based 
1 0 representation of said document; 

a legal disclosure module for presenting the user, in said web environment, 
with legal information related to electronically signing said document, and for 
obtaining agreement from the user of said legal information; 

a document approval module for providing the signature of the user to the 
1 5 document upon agreement from the user of the legal information, thereby signing 
said document; 

a process log module for generating a process log of the signing of the 
document and securely associating said process log with the document as signed; 
and 

20 a document distribution module for making the document as signed 

available to the user. 

50. A system according to claim 49, wherein said document-rendering module 
comprises retrieving means for retrieving said document from a document storing 

25 location. 

51 . A system according to claim 49, further comprising a document customization 
module cooperating with the document-rendering module for generating said 
document from a template. 
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52. A system according to claim 49, wiierein said document-rendering module 
comprises transforming means for transforming said document from a non-web 
format to a web-format. 

5 53. A system according to claim 49, wherein said legal information comprises 
information about legal implications of the signing of the document. 

54. A system according to claim 49, wherein said legal information comprises legal 
disclosures related to said document. 

10 

55. A system according to claim 49, wherein said legal disclosure module 
comprises displaying means for displaying said legal information in a web-based 
medium. 

15 56. A system according to claim 55, wherein said web-based medium includes a 
plurality of web pages. 

57. A system according to claim 55, wherein said web-based medium Includes a 
plurality of dialogue boxes. 

20 

58. A system according to claim 49, further comprising a user binding module 
cooperating with the secure electronic system to obtain therefrom user-specific 
information, generating a special signature file using said user-specific information 
and providing said special signature file to the document approval module, said 

25 special signature file defining the signature of the user. 

59. A system according to claim 58, wherein said user-specific information 
comprises a digital certificate and private key. 
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60. A system according to claim 49, wherein said process log comprises 
reconstruction data for allowing the reconstruction of the signing of the document 
as executed by said user. 

61 . A system according to claim 49, wherein said process log module comprises 
means for generating a secure process authentication code uniquely representing 
said process log, and embedding said secure process authentication code in said 
document as signed, thereby securely associating said process log and document. 

62. A system according to claim 61 , wherein said means to generate a secure 
process authentication code comprise a hash module. 

63. A system according to claim 49, further comprising an audit trail module for 
providing an audit trail of the signing of the document in said document as signed. 

64. A system according to claim 63, wherein said audit trail includes a secure 
document authentication code uniquely representing said document as signed. 

65. A system according to claim 64, wherein the document authentication code is 
a hash of said document as signed. 

66. A system according to claim 49, wherein the document approval module 
comprises means for embedding a document authentication code uniquely 
representing the document as signed inside said document. 

67. A system according to claim 49, wherein said document distribution module 
comprises means for transmitting a copy of the document as signed to the user. 

68. A system according to claim 69, wherein said document distribution module 
provides a copy of the document as signed to at least one additional party 
concerned by said electronic document. 



